Encrypts email messages using public-key cryptography. Smooth integration with Web-based email. Plug-ins for all popular browsers and Outlook. Apps for Android and iOS available. Can encrypt folders in Web-based mail accounts. Free!

Cons

Unencrypted messages travel to the Enlocked website for encryption, rather than being encrypted end-to-end.

Bottom Line

Enlocked's many plug-ins make sending and receiving encrypted email a breeze. Special handling of Web-based email accounts makes using Enlocked even easier.

You take a risk every time you send sensitive information in an email message. Email is intrinsically insecure; your messages bounce from server to server completely unprotected. The new Enlocked (free) service will automatically encrypt your messages, ensuring that only the recipient can read them. A multitude of plug-ins make it especially easy to use.

Similar Products

Simple Sign-upThe main Enlocked Web page includes a form that lets you send yourself an encrypted email message, just to see how it works. You'll receive a message explaining that in order to read the actual encrypted text you must sign up for a free Enlocked account. The first time you send an encrypted message to others, they'll see this same explanatory message.

Enlocked works with any email account, but it includes special handling for Web-based accounts from AOL, Google, Microsoft, and Yahoo. Once you've signed up, you can check your encrypted messages through the Enlocked Anywhere page. You do need to give Enlocked permission to grab those messages from your account, naturally. To use Enlocked Anywhere with an email account from another provider, you must copy the contents of the encrypted attachment into a box on the Enlocked Anywhere page.

Useful Plug-InsEnlocked offers browser plug-ins for Chrome, Firefox, Internet Explorer, and Safari. With the plug-in installed, you can use your Web-based email account just as you always would. When you receive an encrypted message, the plug-in decrypts it automatically.

Those not using Web-based email can install a plug-in for Microsoft Outlook. The plug-in adds a "Send Secure" button to the toolbar. The first time you use it in a given Outlook session you'll have to log in; after that you remain logged in as long as Outlook is running. When you click on an encrypted message in the Inbox, the Enlocked plug-in adds its own preview pane to Outlook and displays the message contents as well as any attachments.

These days you're as likely to check email on your phone as on your PC, so Enlocked offers apps for iPhone, Android, and soon Blackberry. When you get an encrypted message you simply tap the attachment and chose "Open in 'Enlocked'" to view the contents.

How It WorksThe first time you send an encrypted email message to a particular account, Enlocked generates a public and private key pair for that account. When the recipient registers, their key information is already in the system. Enlocked uses PGP (Pretty Good Privacy) to handle encryption.

OpenID is the technology that lets you use Enlocked without having to log in. Once you authenticate to your Web-based email account, you're also authenticated to Enlocked. One more essential technology, OAuth, lets Enlocked capture your draft message, encrypt it, and stick it back in your outbox for sending. Enlocked never receives your actual email password, just the message contents.

Other SolutionsAt first glance Enlocked's handling of keys might seem similar to what Voltage Security Network ($65 direct, 3 stars) does. However, Voltage's Identity-Based Encryption technology uses the recipient's email address as the public key and generates a private key on first use.

Voltage VP Mark Bower was quick to point out that Voltage's solution is encrypted end-to-end. Enlocked, by contrast, receives your plaintext method through ordinary secure HTTP, encrypts it on the server, and then sends the encrypted message back. Your original message resides on the Enlocked servers until this process is complete. "It takes just one piece of malware, one internal configuration issue, or one insider for a whole organization’s compliance to privacy regulations to fall apart," said Bower.

PrivateSky (free, 4 stars) takes a very different approach. It works specifically with Web-based mail accounts, encrypting messages on the sender's system and decrypting them on the recipient's system. In truth, it's not limited to email, as it encrypts and decrypts text in any Web form.

Send. 2.0 (free, 4 stars), another free email encryption solution, also offers an Outlook plug-in, but doesn't have special handling for Web-based mail. Limits on the number and size of messages sent via this service are raised (but not removed) in the non-free Send. Pro ($5/month direct, 4 stars).

Advanced FeaturesIf you're a security all-star who already has a set of keys for encryption, you can swap in your existing public key for Enlocked to use. Conversely, you can download the keys generated by Enlocked and use them with a different PGP implementation.

For those using Web-based mail accounts, Enlocked offers a feature called Ensafe. When you click the lock icon, Enlocked displays your account's list of folders. Check the box next to folder and Enlocked will encrypt its contents.

Enlocked focuses strongly (and successfully) on ease of use. It may not be the best solution for an enterprise that's subject to compliance with government regulations on protection and retention of email. However, for individuals and small businesses seeking to protect sensitive information it's a good choice.

Read More

About the Author

Neil Rubenking served as vice president and president of the San Francisco PC User Group for three years when the IBM PC was brand new. He was present at the formation of the Association of Shareware Professionals, and served on its board of directors. In 1986, PC Magazine brought Neil on board to handle the torrent of Turbo Pascal tips submitted b... See Full Bio

Enlocked

Enlocked

Get Our Best Stories!

This newsletter may contain advertising, deals, or affiliate links. Subscribing to a newsletter indicates your consent to our Terms of Use and Privacy Policy. You may unsubscribe from the newsletters at any time.